Course Introduction
Your Textbook: Alice and Bob Learn Application Security
Definitions and Burning Questions
What is AppSec, what is DevSecOps, and why do they matter?
Computer Sciences vs Application Security
What is Application Security?
Can you jump right into an Application Security position?
Is application security just coding?
Biggest Application Security Challenges
Skillsets needed for Application Security
How can I get into AppSec?
Definitions and Burning Questions: Quiz
Application Security Goals
Goal: Finding Vulnerabilities
Goal: The Knowledge to Fix What You Have Found
Goal: Giving Developers Security Tools
Goal: Education and Reference Materials
Goal: Continuous Improvement
Application Security Goals: Quiz
Choosing Goals
Choosing your program goals.
AppSec Activities - The Basics
Interactive AppSec Activities Assigment
528 KB
VA Scans and Security Assessments
Secure Code Review and SAST
Software Composition Analysis (SCA)
AppSec Activities - The Basics: Quiz
AppSec Activities - Intermediate
Developer Education and Advocacy Programs
Policies, Guidelines and Standards
Giving Developers Security Tools
Secure Coding Library/ Templates
Security Reference Materials
‘The Partnership Model’
Security Regression Testing (with unit tests)
Capture The Flag and Gamification
Adding a shield in front of your app (WAF/RASP)
AppSec Activities - Intermediate: Quiz
AppSec Activities - DevOps Flavoured
Adding Security Tooling to a Pipeline
Chaos Engineering and Red Teaming
Asking directly for feedback from Dev & Ops
Turning PenTest results into Unit Tests
AppSec Activities - DevOps Flavoured: Quiz
AppSec Activities - Advanced
Team-Specific Customized Security Training
Targeting an Entire Bug Class
Security Exercises and Simulations
Did you complete the interactive assignment?
Interactive AppSec Activities Assigment.pdf
528 KB
AppSec Activities - Advanced: Quiz
AppSec Tooling - The Basics
Interactive Tooling Assignment
Interactive AppSec Tooling Assigment
382 KB
Introduction to AppSec Tooling
Static Application Security Testing (SAST)
Software Composition Analysis Tools
Dynamic Application Security Testing (DAST)
VM & Container VA scanners
AppSec Tooling - The Basics: Quiz
AppSec Tooling - Intermediate
API Tools that Speak Directly to the API
Web Application Firewall (WAF)
Tooling Made for Pipelines
AppSec Tooling - Intermediate: Quiz
AppSec Tooling - Modern Twist
Interactive Application Security Testing (IAST)
Runtime Application Security Protection (RASP)
Application and Web Asset Inventory
AppSec Tooling - Modern Twist: Quiz
AppSec Adjacent Tooling
Integrated Bug Tracker for Vulnerabilities
Playbooks = Workflows + Serverless Apps
VM/Container VA Scanners - Again
Application Control Tooling
File Integrity Monitoring
AppSec Tooling Exercise - What to do.
Interactive AppSec Tooling Assigment.pdf
382 KB
AppSec Adjacent Tooling: Quiz
Updating Your Goals
Final Project - Update Your Goals.pdf
762 KB
Conclusion
Thank you for choosing We Hack Purple.
